Description
Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.
Published: 2026-10-12
Score: 7.4 High
EPSS: < 1% Very Low
KEV: No
Impact: Data confidentiality and integrity at risk due to cleartext cluster-management traffic
Action: Patch Now
AI Analysis

Impact

Cleartext transmission is used for certain cluster‑management communications in Progress MarkLogic Server 12.x releases prior to 12.1.0. This flaw allows an attacker positioned on the same network to intercept, read, or modify data exchanged during cluster join operations, potentially leading to unauthorized alteration of cluster configuration or execution of malicious commands. The weakness is represented by CWE‑319.

Affected Systems

The vulnerability affects Progress Software Corporation’s MarkLogic Server 12.x series on all releases earlier than 12.1.0. Versions 12.1.0 and later have been updated to use encrypted transport for cluster‑manager communications, eliminating the exposure.

Risk and Exploitability

The CVSS score of 7.4 indicates a high‑impact vulnerability, and while the EPSS score is not provided, the absence of a public exploit does not reduce the risk for a network‑positioned attacker who can observe or tamper with traffic between cluster nodes. The vulnerability is not yet listed in the CISA KEV catalog, but the potential for data integrity compromise warrants precautionary measures.

Generated by OpenCVE AI on October 12, 2026 at 19:06 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to Progress MarkLogic Server 12.1.0 or later, where cluster‑management communications are encrypted.
  • If an immediate upgrade is not possible, restrict cluster node traffic to a limited, secure network segment or use VPN to mitigate eavesdropping and tampering.
  • Monitor cluster network traffic for anomalies and validate cluster configuration integrity regularly.

Generated by OpenCVE AI on October 12, 2026 at 19:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 12 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Progress Software Corporation
Progress Software Corporation marklogic Server
Vendors & Products Progress Software Corporation
Progress Software Corporation marklogic Server

Mon, 12 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.
Title Cleartext transmission in Progress MarkLogic Server cluster join operations
Weaknesses CWE-319
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Progress Software Corporation Marklogic Server
cve-icon MITRE

Status: PUBLISHED

Assigner: ProgressSoftware

Published:

Updated: 2026-10-14T10:51:06.098Z

Reserved: 2026-09-04T18:43:16.554Z

Link: CVE-2026-85973

cve-icon Vulnrichment

Updated: 2026-10-14T10:41:37.316Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-12T17:17:38.000

Modified: 2026-10-15T16:08:54.067

Link: CVE-2026-85973

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-12T22:00:16Z

Weaknesses
  • CWE-319

    Cleartext Transmission of Sensitive Information